Plugin Crashed my Site

Post a reply


This question is a means of preventing automated form submissions by spambots.
Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:
BBCode is ON
[img] is ON
[url] is ON
Smilies are ON
Topic review
   

If you wish to attach one or more files enter the details below.

Maximum filesize per attachment: 1 MiB.

Expand view Topic review: Plugin Crashed my Site

Re: Plugin Crashed my Site

by axew3 » Wed Mar 29, 2017 4:35 pm

let you know as soon after a test ...

Re: Plugin Crashed my Site

by mannyotr » Wed Mar 29, 2017 11:58 am

I use the WP-Members plugin...

https://wordpress.org/plugins/wp-members/

Re: Plugin Crashed my Site

by axew3 » Tue Mar 28, 2017 10:32 pm

is phpBB version 3.1 or better?
at line 464 of wp_w3all.php
where

Code: Select all

$check = hash_equals( $hash, md5( $password ) );
the second parameter (the pass you insert to login on login form) arrive/is passed at this point as NULL. Strange. Maybe some plugin you use interact with login, and onlogin the password you enter, is nullified at some point (as here the result is a null value passed to be compared with hash)? Which plugins you use that can interact with login (if there is)?

Plugin Crashed my Site

by mannyotr » Tue Mar 28, 2017 7:37 pm

I installed the WP w3all phpBB plugin on my WP installation. But when I tried configuring it crashed my website.

I entered the correct path to my phpbb config.php file as required. And I entered the correct URL to the phpBB forum.

When I saved the configurations I was logged out of the website. When I tried logging in again my website crashed and this is the error generated (I removed any mention of the actual password or hash):

Code: Select all

[28-Mar-2017 18:44:12 UTC] PHP Warning:  hash_equals(): Expected known_string to be a string, null given in /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/wp_w3all.php on line 464
[28-Mar-2017 18:44:12 UTC] PHP Fatal error:  Uncaught exception 'Exception' with message 'Unsupported hash format.' in /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/addons/bcrypt/bcrypt.php:111
Stack trace:
#0 /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/addons/bcrypt/bcrypt.php(59): w3_Bcrypt::_validateIdentifier(NULL)
#1 /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/wp_w3all.php(485): w3_Bcrypt::checkPassword(<password was here>, NULL)
#2 /home1/winderm1/public_html/flxclone/wp-includes/user.php(154): wp_check_password(<password was here>, <hash was here?>, 4)
#3 [internal function]: wp_authenticate_username_password(NULL, <username was here>, <password was here>)
#4 /home1/winderm1/public_html/flxclone/wp-includes/plugin.php(213): call_user_func_array('wp_authenticate...', Array)
#5 /home1/winderm1/public_html/flxclone/wp-includes/pluggable.php(567): apply_filters('authenticate', NULL, <username was here>, <password was here>)
#6 /home1/winderm1/public_html/flxclone/w in /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/addons/bcrypt/bcrypt.php on line 111
The only way to log in again was to delete the WP w3all phpBB folder from the WP plugin directory.

Any ideas?

Top